Reject contexts whose JSON serialization could change associated data or collapse distinct keys. Validate both submissions and persisted jobs before changing an object key; retain valid Unicode, including replacement characters.
Exercise malformed-key collisions, invalid values, manifest reload failures and readback with the real builtin KMS. Refs #346.
Signed-off-by: Feng Ruohang <rh@vonng.com>
Decode context without shared cached state for validation and execution, and isolate probe-only associated data. Cover manifest reload, retry and authenticated decryption after rotation.
Fixes#346
Signed-off-by: Feng Ruohang <rh@vonng.com>
Feng Ruohang